Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/ef1e5a307abf3a70ad8e6e67396cbb6ea88d3221.roa
File:                     ef1e5a307abf3a70ad8e6e67396cbb6ea88d3221.roa (raw, json)
Hash identifier:          V+NVVrdttTlrHaeuCjRYeIob69amGhVSj3Tj4oEOJ58=
Subject key identifier:   BF:FA:59:6E:76:BF:7F:0F:6F:9D:92:53:40:66:FC:86:4C:00:1B:68
Certificate issuer:       /CN=9469fb387befc96f019d014c6e5234d0955553a9
Certificate serial:       0143C9
Authority key identifier: 0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/ef1e5a307abf3a70ad8e6e67396cbb6ea88d3221.roa
Signing time:             Sun 14 Nov 2021 14:55:32 +0000
ROA not before:           Sun 14 Nov 2021 03:00:00 +0000
ROA not after:            Tue 14 Nov 2023 03:00:00 +0000
asID:                     27866
IP address blocks:        201.217.12.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82889 (0x143c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9469fb387befc96f019d014c6e5234d0955553a9
        Validity
            Not Before: Nov 14 03:00:00 2021 GMT
            Not After : Nov 14 03:00:00 2023 GMT
        Subject: CN=ef1e5a307abf3a70ad8e6e67396cbb6ea88d3221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9b:84:cb:98:cb:5e:f8:91:36:ba:28:72:74:
                    78:a6:b7:ec:cb:ec:73:55:bb:eb:3e:c8:30:e5:8b:
                    b1:fa:b9:01:97:2e:2b:19:01:30:b6:8e:67:db:d3:
                    98:b0:98:0b:3b:86:97:7f:b5:2e:a8:2a:e3:fc:33:
                    8c:09:6d:d7:00:ad:20:02:b4:23:df:07:e5:d5:29:
                    ee:92:2a:c8:39:82:69:7b:ef:5b:de:d2:fc:5e:01:
                    7a:9e:2a:11:b4:40:0d:8f:2e:c5:5e:93:ae:31:f0:
                    ff:a9:2f:95:b3:9e:81:68:b4:f5:79:09:0b:39:77:
                    be:8c:5b:c4:e5:1b:38:65:85:76:a9:e8:9d:76:1a:
                    33:a7:9e:8a:81:49:74:1d:51:28:06:fb:80:9f:b1:
                    42:2e:f0:e4:62:bd:37:f6:e0:7d:32:f9:e3:8e:fc:
                    57:e0:84:f5:29:87:1a:fc:cf:7a:cf:19:fa:90:41:
                    ca:65:59:0d:de:aa:4c:57:17:ef:99:2f:99:ea:ce:
                    40:a6:55:6d:49:4d:5b:4b:8e:8e:69:97:56:65:12:
                    bf:e3:92:a9:e9:eb:f8:f6:36:82:38:44:ad:33:2e:
                    8a:6d:3d:ab:25:e1:84:b4:0d:f5:ae:e5:01:b9:67:
                    65:47:9c:00:5f:1a:0b:a5:50:a8:18:ca:74:9f:38:
                    44:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:FA:59:6E:76:BF:7F:0F:6F:9D:92:53:40:66:FC:86:4C:00:1B:68
            X509v3 Authority Key Identifier:
                keyid:0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/ef1e5a307abf3a70ad8e6e67396cbb6ea88d3221.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/9469fb387befc96f019d014c6e5234d0955553a9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:55:8e:97:63:66:99:f7:74:41:12:63:25:e9:50:c0:13:33:
         96:41:ff:24:fe:0f:ec:ee:85:d9:08:02:ba:c9:54:3e:06:5b:
         c4:92:be:1a:ae:48:90:2a:b3:19:07:d1:4a:41:76:fd:25:8b:
         93:16:89:79:0e:01:e9:e8:a1:f3:39:a9:67:30:e2:ab:1c:6a:
         92:4c:3c:da:14:67:be:84:fa:c6:ff:f5:8c:fd:f7:e9:1d:36:
         02:cf:09:e0:2a:d5:98:1d:fb:49:e1:28:b0:3c:c9:4b:3b:53:
         8d:37:58:24:3a:be:44:86:2f:2e:00:92:9e:e3:c8:df:7f:e3:
         6e:f5:30:b9:47:61:ce:77:52:b8:dd:8d:ae:13:9e:c2:47:40:
         fc:b9:7f:5b:7b:71:eb:ea:c8:77:00:b1:79:de:76:8c:2a:05:
         51:17:66:1b:f2:13:ff:2d:40:28:a1:dc:ea:e4:64:03:00:1a:
         be:57:56:63:b8:14:ae:06:9c:35:72:ad:ed:19:d5:cf:13:b3:
         cc:15:30:7e:91:94:9c:4e:d4:9e:80:79:79:93:c7:ba:17:41:
         83:3e:ab:44:a9:67:98:81:b3:d2:3d:22:68:9c:0d:98:a5:28:
         c2:dc:53:56:56:3d:e8:67:0c:56:78:36:a4:28:c4:89:d3:92:
         5c:5b:94:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----